$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: UhVnZAbYUArSEhbrGDfYVI8qjpQJTHBpDvl3iL8gbss= Subject key identifier: D2:A5:73:59:CE:2F:B8:1E:DF:6D:4C:6F:4F:07:D0:23:C4:13:61:46 Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 764FFC997A0F122D0553152DF3B1B1FB19C896E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: CC Signing time: Mon 26 Oct 2026 08:08:33 +0000 Manifest this update: Mon 26 Oct 2026 08:03:33 +0000 Manifest next update: Thu 29 Oct 2026 08:30:33 +0000 Files and hashes: 1: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 2: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) 3: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) 4: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 5: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: bf6ZIQOmI9XrS/LkiR55EGHwVlNwklrXZvLB1du70qM=) 6: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 7: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 08:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4f:fc:99:7a:0f:12:2d:05:53:15:2d:f3:b1:b1:fb:19:c8:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Oct 26 08:03:33 2026 GMT Not After : Oct 29 08:30:33 2026 GMT Subject: CN=D2A57359CE2FB81EDF6D4C6F4F07D023C4136146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:33:fa:7d:8f:3e:ec:17:3c:84:8f:59:aa:6f: ac:f2:31:57:32:4d:77:5e:df:78:db:4a:cd:a6:d7: 72:e6:52:4c:40:0c:a8:9c:1e:7d:12:05:95:46:b0: a4:a4:0b:8e:11:66:63:a8:d8:46:97:8d:c4:27:98: 4e:41:12:55:2d:cc:33:96:3b:19:44:a0:5b:07:92: 76:d8:d1:18:aa:5b:b3:3d:01:3a:9f:2f:47:e9:61: 8e:d8:78:c7:48:be:41:86:32:45:56:3e:58:cb:c4: 99:ce:55:00:bb:4a:23:ab:71:f4:6a:12:42:06:f9: 19:e4:78:72:59:cb:39:3b:5c:e4:f5:13:44:5d:4f: 34:ed:59:18:80:b5:ce:e3:4d:ab:4f:1c:0e:03:93: 1d:93:36:8a:d6:36:70:37:62:45:9e:79:f4:57:44: 06:ea:b1:f0:e0:24:c1:75:c5:f6:dd:d7:f7:0e:53: 73:8b:2f:7d:e5:4b:28:41:c2:d2:26:7e:71:5e:67: bf:88:c0:13:7e:dd:76:bc:b3:15:00:8c:f8:c5:c8: 35:3a:a3:e2:90:ad:1d:cd:80:c6:49:2d:99:d6:22: 4c:19:bd:95:a6:87:02:41:cb:d2:b4:bc:69:8b:80: f7:6c:11:df:bb:29:e8:66:ae:b1:8d:5e:e6:81:f4: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:73:59:CE:2F:B8:1E:DF:6D:4C:6F:4F:07:D0:23:C4:13:61:46 X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1b:48:66:b4:43:25:d7:a2:f7:90:df:91:c9:42:7c:b6:d5: 5d:f3:f8:36:6d:a0:f1:01:81:c5:77:10:1b:2e:db:13:89:cc: 4f:e2:1e:cd:56:e9:4a:3e:e1:74:75:fe:13:c5:d8:4a:06:e4: bf:04:85:7c:68:94:97:3f:dd:af:b7:7e:6e:01:52:78:a5:2d: fb:aa:8b:8c:08:59:71:fd:7e:87:ec:52:63:d9:23:04:0c:ab: 2d:79:fe:a1:a2:fb:2e:aa:0e:34:0b:b8:53:ad:95:f6:ce:0f: b5:5d:e8:a6:4b:c4:39:75:26:a1:8c:f5:93:15:63:52:58:d9: 41:ec:80:4a:d4:33:a1:ac:5a:68:7a:e5:51:25:4e:bf:6f:d7: b7:b6:73:e0:c9:31:b4:dc:b0:85:5f:07:71:7a:5e:c9:1e:6d: 35:a1:25:d3:22:8c:8f:3b:7b:60:79:07:71:87:17:f8:9f:be: b4:c3:3b:32:d0:3e:12:9c:95:ce:d1:e0:b6:34:0d:c1:18:6f: 41:26:bf:fc:3a:33:07:f1:4a:9f:0c:c1:42:fa:83:fc:0d:6e: c7:50:36:3d:82:ee:6a:3f:bb:1b:f9:7f:17:bc:fe:fe:8f:18: 10:34:af:a2:24:57:34:ba:8c:b8:a5:96:5d:1b:ad:1f:bf:74: 1b:76:31:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdk/8mXoPEi0FUxUt87Gx+xnIluAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjEwMjYwODAzMzNaFw0yNjEwMjkwODMwMzNaMDMxMTAvBgNV BAMTKEQyQTU3MzU5Q0UyRkI4MUVERjZENEM2RjRGMDdEMDIzQzQxMzYxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVM/p9jz7sFzyEj1mqb6zyMVcy TXde33jbSs2m13LmUkxADKicHn0SBZVGsKSkC44RZmOo2EaXjcQnmE5BElUtzDOW OxlEoFsHknbY0RiqW7M9ATqfL0fpYY7YeMdIvkGGMkVWPljLxJnOVQC7SiOrcfRq EkIG+RnkeHJZyzk7XOT1E0RdTzTtWRiAtc7jTatPHA4Dkx2TNorWNnA3YkWeefRX RAbqsfDgJMF1xfbd1/cOU3OLL33lSyhBwtImfnFeZ7+IwBN+3Xa8sxUAjPjFyDU6 o+KQrR3NgMZJLZnWIkwZvZWmhwJBy9K0vGmLgPdsEd+7KehmrrGNXuaB9PaVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0qVzWc4vuB7fbUxvTwfQI8QTYUYwHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRtIZrRDJdei 95DfkclCfLbVXfP4Nm2g8QGBxXcQGy7bE4nMT+IezVbpSj7hdHX+E8XYSgbkvwSF fGiUlz/dr7d+bgFSeKUt+6qLjAhZcf1+h+xSY9kjBAyrLXn+oaL7LqoONAu4U62V 9s4PtV3opkvEOXUmoYz1kxVjUljZQeyAStQzoaxaaHrlUSVOv2/Xt7Zz4MkxtNyw hV8HcXpeyR5tNaEl0yKMjzt7YHkHcYcX+J++tMM7MtA+EpyVztHgtjQNwRhvQSa/ /DozB/FKnwzBQvqD/A1ux1A2PYLuaj+7G/l/F7z+/o8YEDSvoiRXNLqMuKWWXRut H790G3YxFA== -----END CERTIFICATE-----Generated at Tue Oct 27 17:34:22 2026 by rpki-client